United States — California US-CA

Californias Digital Financial Assets Law became fully operative on 1 July 2026, and the cycle immediately preceding and following that date shows a regime being actively worked rather than merely commenced. The Department of Financial Protection and Innovation issued a consent order against Anh Management LLC, operator of the Hermes Bitcoin kiosk network of 42 machines across Southern California, requiring cessation of all California digital-financial-asset kiosk activity by 20 May 2026. The order was grounded in DFAL and CCFPL violations together with an allegation of a failed BSA/AML compliance program, specifically failure to collect and verify customer identification and charging in excess of the statutory kiosk transaction and fee cap. DFPIs own release is the primary source for this action and supports it with a Tier 1 confidence rating.

The second development in this domain is structural rather than enforcement-driven. SB 97 (Stats. 2026, Ch. 52) took effect on 30 June 2026, one day before DFALs licensing regime reached full effect, and amended DFAL by tightening the completed-application standard at Financial Code section 3201 while repealing the statutes stablecoin-specific provisions. Those provisions, added by AB 1934 in 2024, had created a dedicated issuer record-keeping duty and a DFPI-approval pathway for stablecoin issuers that were not fully backed by eligible securities. With their repeal, stablecoin-related digital-financial-asset activity in California now falls under the general DFAL licensing framework rather than a tailored sub-regime. This repeal is sourced to a single secondary regulatory tracker; no primary statute text was independently retrieved this cycle to confirm the exact repealed section numbers, and that gap is recorded rather than inferred around.

Read together, the two developments describe a jurisdiction where a new digital-asset licensing perimeter is becoming operationally real at the same moment one of its specialised sub-components is being withdrawn. That combination is itself a form of risk signal distinct from either development read in isolation: operators that built compliance programs around the now-repealed stablecoin provisions face a period of uncertainty about what standard now applies to that activity, pending further DFPI guidance.

The enforcement side also illustrates how consumer-protection, licensing and AML obligations interact under the same statute. The DFAL kiosk fee cap and customer-identification duty are licensing and consumer-protection mechanisms, but DFPIs own characterisation of the Hermes Bitcoin program folds in a BSA/AML compliance failure as well, meaning the state regulator is treating federal AML program adequacy as material to a state licensing enforcement action, even though the underlying AML authority remains federal. This is consistent with a pattern DFPI has applied to other non-compliant kiosk operators, though the evidence base for that broader pattern beyond the Hermes Bitcoin matter itself is not independently corroborated in this cycle's sourcing.

Outlook

DFPI is expected, as scheduled, to issue further implementing guidance in the fourth quarter of 2026 clarifying exemptions and the treatment of stablecoin activity following SB 97s repeal of the dedicated stablecoin sub-regime, though the timing carries a half-year uncertainty band and should not be treated as fixed. Whether DFPI continues its kiosk-enforcement pattern against other non-compliant operators in the months following the Hermes Bitcoin consent order would be the clearest signal of whether the DFAL regime is functioning as an active supervisory programme in its first full year of operation, rather than a one-time licensing gate. A continuing absence of primary-source confirmation of the SB 97 repeal's precise statutory text remains an open research item that should be resolved before the repeal is treated as fully settled.